Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
File: jVdqhq46NTLhCcXN9ymtR4wcaX8.mft (raw, json)
Hash identifier: 1oM9GozjxOjilHsbOOM9PEkNM8PZ8xzkDIVERz/y29Q=
Subject key identifier: 9E:F4:1E:14:88:77:26:1A:40:68:A3:A2:8D:B2:F1:E1:60:BA:E7:8A
Authority key identifier: 8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F
Certificate issuer: /CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
Certificate serial: 019D9A06EE0114FD30B22D29B0BF2C9EF723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
Manifest number: 15DB
Signing time: Fri 17 Apr 2026 06:00:38 +0000
Manifest this update: Fri 17 Apr 2026 06:00:38 +0000
Manifest next update: Sat 18 Apr 2026 06:00:38 +0000
Files and hashes: 1: OBXirIBylsu5hF24eFc4dWHtfUA.roa (hash: V67fHNvga440B5p2S4z73zdpX5hKFuY2GyqyJaC4HdU=)
2: jVdqhq46NTLhCcXN9ymtR4wcaX8.crl (hash: VVkI5tLuV9bj2D/4FpoSJJk4cVl/ugCFxvbGNddGFtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:ee:01:14:fd:30:b2:2d:29:b0:bf:2c:9e:f7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
Validity
Not Before: Apr 17 06:00:38 2026 GMT
Not After : Apr 18 06:00:38 2026 GMT
Subject: CN=9ef41e148877261a4068a3a28db2f1e160bae78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cf:b5:c0:3e:be:98:15:fe:1e:9a:c3:91:5d:
4f:35:45:2b:ef:7b:50:5c:7f:b0:5c:40:b9:99:d1:
f6:56:a4:bd:17:f3:b4:3d:6d:cf:f7:f4:5c:dc:71:
6c:09:ba:72:a9:c5:ee:28:65:80:24:98:fc:51:5c:
c6:39:9c:36:b6:ea:09:6a:a5:e6:9b:4d:87:a7:47:
d7:cd:7e:5e:8f:a5:08:19:cb:c9:6b:f0:09:be:09:
99:fd:14:50:b6:02:26:50:de:e5:fb:1d:04:57:e1:
b6:58:86:9e:32:15:01:72:27:5c:f4:22:58:94:4b:
31:00:4f:9a:a5:54:bc:07:5b:a6:16:1b:ee:e7:92:
36:c1:8e:bd:96:d6:f9:c3:c4:31:07:8d:0b:0f:e5:
f2:a7:3e:13:bd:da:5f:3b:d5:51:9b:57:f7:80:f7:
e5:b4:67:fe:ae:10:d6:c5:58:04:de:24:4a:fe:f0:
4e:03:32:23:2e:da:a3:14:80:7a:3b:c8:da:a8:ab:
a5:1b:ce:29:d9:29:76:ce:73:5a:39:66:0b:b9:3d:
bf:2c:2f:b6:91:d0:bc:98:65:79:73:9f:98:f4:b6:
0b:1b:b5:23:05:1d:4e:34:fb:3d:e1:8f:45:41:7e:
2a:80:03:6a:02:19:dd:a6:e4:39:f6:72:99:8e:2e:
dc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F4:1E:14:88:77:26:1A:40:68:A3:A2:8D:B2:F1:E1:60:BA:E7:8A
X509v3 Authority Key Identifier:
keyid:8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:13:cc:cc:d7:9d:fe:b0:bd:00:f1:97:20:e1:cf:09:57:e0:
d6:64:b6:47:50:50:e6:6c:e5:0b:3b:3b:86:7d:4d:0b:8f:93:
e3:a4:b1:1f:9b:a8:d2:84:51:97:5a:90:6b:0f:28:45:60:f4:
e1:af:58:05:63:fb:d3:10:f4:d2:a2:31:77:c4:52:c8:0c:c3:
43:08:e8:e5:3f:a0:c7:a3:08:d2:d8:52:9d:ae:7f:2e:f2:bc:
cf:6f:01:70:2c:6d:7f:71:f4:21:5d:08:3b:a9:d1:75:35:39:
63:43:ae:a0:82:f0:79:11:a3:c6:0b:00:72:f6:0a:20:b3:bf:
a0:93:72:b3:4c:46:cf:4b:af:fe:7e:26:3d:92:57:24:59:2b:
b7:ec:41:b0:c2:59:36:a9:0d:86:3d:7f:1b:0b:43:d8:35:b8:
ab:d6:6a:c3:89:ae:84:30:71:8b:1f:9b:46:8f:a7:d6:2b:81:
d8:9f:2f:11:c0:32:f8:da:6c:04:68:9a:8d:6a:76:d5:98:82:
5b:3f:94:50:f9:14:98:e3:29:7c:b4:59:ca:fb:c3:11:9a:1f:
96:8f:00:a1:d8:04:ae:51:b5:02:17:91:80:75:50:01:42:a3:
50:03:e6:ff:c5:fa:34:bc:6d:a7:b9:f4:0d:ce:01:61:21:59:
86:7f:ee:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:14 2026 by rpki-client